Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File: d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier: 1iM/ibkC2PvvH7xnS/en4U+h3KST+vT8OTo+22kHRPI=
Subject key identifier: 29:EF:DC:F5:5B:92:0C:6B:2A:2E:39:51:56:0F:C6:7C:A7:9D:0E:D5
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer: /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial: 019F1A8D86D72AEAF2452DB86D8776EDC303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number: 1249
Signing time: Tue 30 Jun 2026 22:01:50 +0000
Manifest this update: Tue 30 Jun 2026 22:01:50 +0000
Manifest next update: Wed 01 Jul 2026 22:01:50 +0000
Files and hashes: 1: IM14LBYF8xBAMrWihjQwJhZWTFs.roa (hash: L/LoNTKL0OkWZiTSY3TN85uewDjoeQN9VcIBqy5aAq8=)
2: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: GbAV6n3/epWpwINcHBn4dpwKrR9vEXUaaQgtyf9g6MI=)
3: meqA3EJ2dk40MOFtOn3KY_3JqZc.roa (hash: PMvWvyZeQ/F56OIn+Hm8HW0sQqsC8sTM1/3A775LAFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:8d:86:d7:2a:ea:f2:45:2d:b8:6d:87:76:ed:c3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Validity
Not Before: Jun 30 22:01:50 2026 GMT
Not After : Jul 1 22:01:50 2026 GMT
Subject: CN=29efdcf55b920c6b2a2e3951560fc67ca79d0ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:ba:37:b6:98:67:f0:c1:9a:de:4c:60:4b:
1c:9d:24:ac:1e:dc:f9:a7:f2:d8:b5:80:a0:8f:78:
08:42:5a:81:9f:6d:c8:03:01:a5:c4:08:78:2e:9a:
48:30:ef:5f:88:bb:c7:0d:db:d4:3e:23:6d:50:d8:
79:7d:17:ea:ac:20:c7:8c:a9:78:fb:6d:8f:22:a7:
62:cc:45:4d:7f:d4:3c:25:a0:1a:65:02:cb:d4:bc:
e4:a9:dc:d0:43:d7:32:c1:78:dc:43:56:3b:16:ba:
30:15:24:d2:c3:08:fd:f9:a9:e7:bf:c8:c7:8e:3f:
45:c6:4b:c5:6d:9f:eb:ee:2a:f2:84:46:f1:3c:fc:
21:77:b4:c9:85:ba:a1:87:75:9a:b3:d9:9d:e5:6a:
60:0d:5f:26:73:38:19:f6:ff:c4:a1:5c:2d:d0:04:
be:ae:6f:7a:f1:51:30:5e:04:6e:9c:47:d8:27:11:
18:53:2e:1c:3a:7a:6a:ab:4f:44:f4:49:a6:9c:67:
85:bd:e7:06:d7:3d:98:4b:4a:85:c0:e5:3c:da:0c:
c7:62:7b:2b:48:82:09:f0:9f:0c:ee:d3:84:e0:3c:
88:7f:bc:fe:e3:e3:70:7b:bc:83:8f:2f:04:f3:0a:
39:e9:cf:58:4d:ee:b3:24:ae:d6:44:f5:9f:a0:3e:
6d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EF:DC:F5:5B:92:0C:6B:2A:2E:39:51:56:0F:C6:7C:A7:9D:0E:D5
X509v3 Authority Key Identifier:
keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:36:dc:d7:66:3d:2a:e4:5d:61:3e:c9:ab:34:a8:9d:63:ae:
62:4f:f4:bd:8e:4a:93:73:29:e5:47:24:54:97:84:23:75:8a:
2b:21:ab:ec:85:1b:c1:48:53:62:f8:62:f1:25:0b:97:a2:86:
97:4a:2e:9b:6c:22:cf:04:51:ed:d2:db:99:df:6c:50:d0:7a:
6a:0f:4b:11:88:45:a0:0e:d1:db:d5:b1:23:f9:f8:08:ee:75:
64:aa:7c:2c:fb:e5:c5:6c:ba:07:34:e9:22:2d:3d:d2:74:a6:
98:aa:52:e8:99:70:2e:2b:48:9b:87:6e:7a:20:6a:15:a5:2c:
a6:06:a5:79:0c:76:fe:25:ec:eb:b3:48:d8:26:a3:f9:ea:55:
ee:2f:9d:7e:fe:70:48:02:94:f3:aa:10:4c:9e:36:b9:a2:1d:
ea:ad:f0:9f:09:43:5e:31:ba:e9:e1:14:1d:9b:61:5d:e4:89:
bd:d2:58:5a:17:36:fc:1a:46:92:50:26:b1:e3:16:25:5d:71:
75:43:3e:3e:8c:5a:9c:7d:1e:a1:ca:c9:3e:9f:b6:01:1f:71:
01:ae:68:26:78:7c:ad:a7:cf:a1:cf:d3:66:a2:3c:6e:d3:11:
22:f8:02:f2:fa:0c:ae:df:3f:a0:47:30:56:92:10:33:2f:f2:
b8:37:ca:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ajYbXKuryRS24bYd27cMDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjhlN2ZiZDRhYjY5NTA3ZmIxZmUzNTc5YWYzNDNhNTY2
MzkwODYwHhcNMjYwNjMwMjIwMTUwWhcNMjYwNzAxMjIwMTUwWjAzMTEwLwYDVQQD
EygyOWVmZGNmNTViOTIwYzZiMmEyZTM5NTE1NjBmYzY3Y2E3OWQwZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1W6N7aYZ/DBmt5MYEscnSSsHtz5
p/LYtYCgj3gIQlqBn23IAwGlxAh4LppIMO9fiLvHDdvUPiNtUNh5fRfqrCDHjKl4
+22PIqdizEVNf9Q8JaAaZQLL1LzkqdzQQ9cywXjcQ1Y7FrowFSTSwwj9+annv8jH
jj9FxkvFbZ/r7iryhEbxPPwhd7TJhbqhh3Was9md5WpgDV8mczgZ9v/EoVwt0AS+
rm968VEwXgRunEfYJxEYUy4cOnpqq09E9EmmnGeFvecG1z2YS0qFwOU82gzHYnsr
SIIJ8J8M7tOE4DyIf7z+4+Nwe7yDjy8E8wo56c9YTe6zJK7WRPWfoD5tfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnv3PVbkgxrKi45UVYPxnynnQ7VMB8GA1UdIwQY
MBaAFHf45/vUq2lQf7H+NXmvNDpWY5CGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1Njgt
NzdmNmU5NGUzZGNjLzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1NjgtNzdmNmU5NGUzZGNj
LzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzbc12Y9
KuRdYT7JqzSonWOuYk/0vY5Kk3Mp5UckVJeEI3WKKyGr7IUbwUhTYvhi8SULl6KG
l0oum2wizwRR7dLbmd9sUNB6ag9LEYhFoA7R29WxI/n4CO51ZKp8LPvlxWy6BzTp
Ii090nSmmKpS6JlwLitIm4dueiBqFaUspgaleQx2/iXs67NI2Caj+epV7i+dfv5w
SAKU86oQTJ42uaId6q3wnwlDXjG66eEUHZthXeSJvdJYWhc2/BpGklAmseMWJV1x
dUM+PoxanH0eocrJPp+2AR9xAa5oJnh8rafPoc/TZqI8btMRIvgC8voMrt8/oEcw
VpIQMy/yuDfKEw==
-----END CERTIFICATE-----
Generated at Wed Jul 1 03:18:08 2026 by rpki-client